Privacy Policy
HiBUNO ("we", "us") respects your privacy. This policy explains what personal information we handle when you buy and use Tsunagu Family Treasure Box (the "Note"), and what we do not collect.
1. Your entries stay on your device
The text, photos and voice recordings you keep in the Note are stored only in your browser on your own device. They are never sent to us, and we cannot see them. We do not use cookies, advertising or analytics in the Note. Backup files are encrypted with AES-256-GCM using a passphrase you choose; the passphrase is never sent or stored, so it cannot be recovered if you lose it.
2. Information we handle
| When | What |
|---|---|
| When you buy | Your email address, the item and amount, and the date of payment. Your card details are handled directly by Stripe; we do not receive your full card number. |
| When you open your activation link | Your browser sends the one-time code in the link to our server to confirm your purchase. We keep the code only in a one-way scrambled (hashed) form, together with a record of the usage certificate issued to your device. We do not store your IP address; a scrambled form of it is used only to count requests for one minute to prevent misuse. |
| When you contact us | Your email address and the content of your message. Please do not send us your entries or your backup passphrase. |
3. How we use it
- To send your activation link and instructions, and to process refunds
- To stop the activation link and certificate if a purchase is refunded or disputed
- To answer your questions
- To meet our legal and tax obligations
We do not sell your personal information, and we do not use it for advertising.
4. Service providers and international transfers
| Provider | Purpose | Location |
|---|---|---|
| Stripe Payments Japan, K.K., Stripe, Inc. and their affiliates (including Link) | Payment processing, and calculation and collection of sales tax, VAT or GST for purchases from outside Japan | United States and others |
| XServer Inc. | Web hosting, purchase confirmation and sending the activation email | Japan |
| Google LLC (Gmail) | Support email | United States and others |
We are based in Japan and handle personal information in accordance with Japan's Act on the Protection of Personal Information. Your information may be processed in Japan and the United States.
5. How long we keep it
- Purchase and payment records: for the period required by Japanese tax law (generally 7 years), then deleted
- Activation emails: deleted from our sending queue once accepted by the mail server; unsent emails are deleted within 30 days
- Support emails: deleted within 1 year after your inquiry is resolved
- Technical logs: 30 days
6. Security
We use secure connections (HTTPS), keep activation codes only in scrambled form, and limit access to personal information.
7. Your rights
You may ask us to tell you what personal information we hold about you, or to correct, delete or stop using it. Please email us from the address you used for your purchase so that we can confirm your identity. There is no charge. Depending on where you live, you may have additional rights under local law. To delete the entries on your device, delete the Note's data in your browser.
8. Children
The Note is not directed to children under 13, and we do not knowingly collect personal information from them.
9. Changes
If we change this policy, we will post the new version on our website.
10. Contact
HiBUNO (Atsuhiko Miki), Kobe, Hyogo, Japan — note@hibuno-life.jp
Support is available in Japanese only; you may write in English.